DC COVID Alert Notice (DC CAN) is a mobile application developed to assist in contact tracing efforts for the virus that causes COVID-19. This app can help users identify if they have been potentially exposed to COVID-19.
DC CAN was created with a privacy-first approach while still maintaining a balance between protecting public health and preserving personal privacy. The app is designed to make it as difficult as possible for users or others to link the information you choose to provide to you or your device, and to use this information only to enable exposure notifications in the midst of this pandemic.
DC CAN is 100% voluntary and you may choose to opt-in or opt-out of Exposure Notifications at any time.
The app uses the Exposure Notification System from Google and Apple, and is designed to collect and use as little personal information as possible in order to enable exposure notifications. DC CAN does not collect or use any personally-identifying information except for:
- These IDs are shared via Bluetooth between users who have installed DC CAN on nearby devices. This process is managed by your device, not DC CAN.
- These IDs are generated and stored on your device, not DC CAN. They are used only to allow DC CAN and your device to check for exposure when you or someone else uploads a Temporary Exposure Key.
Temporary Exposure Keys
- If you receive a positive test result, you will be given a Temporary Exposure Key by the DC Contact Trace Force for you to upload and share with all users of this app, only if you decide to do so. You are in complete control of the decision whether to upload the Temporary Exposure Key or not.
- DC CAN stores your Temporary Exposure Key for at most 30 days.
- DC CAN will determine if any of the Random IDs for users’ devices has come into contact with are associated with a Temporary Exposure Key.
App Usage Logs
- DC CAN automatically generates logs when you use the service. These logs include some information about your device. We use this information to troubleshoot issues with DC CAN.
- These logs DO NOT include Random IDs or Temporary Exposure Keys, and cannot be used to tie either a Random ID or Temporary Exposure Keys back to you or your device.
- These logs are automatically deleted 7 days after they are generated.
DC CAN does not collect location data from your device, and does not collect or share information typing you or your device to either the Random IDs or Temporary Exposure Keys you generate.
WHEN DO WE SHARE YOUR INFORMATION?
We will not voluntarily share any of your personal information with anyone, except:
When you chose to input your Temporary Exposure Key, DC CAN will share that information (which cannot be linked back to you by someone who does not have access to your device) with other devices that have been in contact with your device, as described in the Google and Apple Exposure Notification System.
We store your personal information in an encrypted form using Amazon Web Services. Amazon Web Services may store this information outside of Canada, including in the United States.
HOW DO WE PROTECT YOUR INFORMATION?
DC CAN protects Temporary Exposure Keys using Google and Apple’s Exposure Notification System, which includes very specific requirements as to how this information will be encrypted and transferred. DC CAN does not store or generate your Random IDs that are handled by your device.
YOUR RIGHTS OVER YOUR INFORMATION
Since Temporary Exposure Keys and the User Access Logs cannot identify a user or their device, DC Health has no way to securely provide you with or delete information upon request. The user has complete control over their use of this technology. The device allows you to turn off Exposure Notifications or delete exposure logs stored on the device at any time. A user can uninstall DC CAN at any time and if the notifications are disabled by deletion of app or a switch togged in device settings, all Temporary Exposure Keys and Random IDs stored by DC CAN will be deleted.
DC CAN is not intended for children under the age of 13, and we do not knowingly allow a child under 13 to use DC CAN. If a user is between the ages of 13 and 17, the user can only access DC CAN if their parent or legal guardian has reviewed and agreed to the Terms of Service on their behalf.